Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_MSmV91TDZU6LW8_FZMv_gHykdY.cer
File: _MSmV91TDZU6LW8_FZMv_gHykdY.cer (raw, json)
Hash identifier: Eo/8D3fRphQMQguNLcELu8zXXg4PlqFXIk2g6Ho3S6Y=
Subject key identifier: FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 5F37
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
caRepository: rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Wed 11 Dec 2024 06:36:42 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 160.250.192.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Feb 2025 14:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24375 (0x5f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Dec 11 06:36:42 2024 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A916BF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ae:52:f6:36:ee:16:08:b6:a0:04:b2:a4:7a:
e0:e7:a0:0c:7c:9a:c7:06:a0:ab:5c:48:d9:1e:3b:
59:b8:7e:75:b0:85:f8:f0:38:31:5e:07:c9:ac:ac:
b7:4d:d3:c6:7f:de:40:bc:f7:1d:97:73:e7:e0:cd:
ac:45:de:17:89:90:28:f9:cb:2d:09:f8:23:2d:03:
ec:db:a7:aa:4d:e8:00:de:3e:71:6b:e0:04:0f:89:
51:b0:27:67:2d:2f:9b:a7:66:80:c6:1e:2f:f7:23:
7e:86:56:dc:42:8c:13:54:26:1a:ac:59:e8:68:6f:
fd:3d:2c:c2:00:a2:b1:15:c6:14:36:90:ae:da:84:
49:38:f7:77:c6:c5:be:7b:11:7f:80:3d:ad:d5:f7:
b1:2b:02:5b:96:6c:70:cc:84:3a:45:5e:87:d0:1c:
cf:05:24:0a:a1:f3:67:2f:13:4a:01:3c:0c:dd:eb:
3b:f9:3f:3a:82:63:3a:c7:56:a0:d3:5a:56:db:c9:
77:55:33:1c:b2:f2:c7:15:f3:19:78:9b:cf:d9:ba:
02:54:7f:31:96:7c:33:c9:dc:4d:fc:73:0b:2d:4e:
43:0f:fa:db:07:41:29:1f:f2:3e:bf:87:29:2a:78:
43:cf:16:f1:63:77:5c:76:80:03:8c:31:14:76:13:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C4:A6:57:DD:53:0D:95:3A:2D:6F:3F:15:93:2F:FE:01:F2:91:D6
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A916BF2B/459E666EB78A11EFB874276EC4F9AE02/_MSmV91TDZU6LW8_FZMv_gHykdY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.250.192.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:34:69:3b:2b:ec:6a:ea:89:09:d5:bd:09:99:7c:22:e5:8c:
89:b1:0d:57:f5:f4:1e:b6:59:a6:d1:71:6e:e9:c0:4a:f6:95:
81:a3:50:ad:fe:32:bb:69:fb:c3:65:c9:80:c8:4f:b8:5c:00:
78:42:72:a0:96:6e:c7:80:a3:4c:64:2e:ce:4d:1e:f3:4d:35:
a4:09:1d:60:cf:6d:4c:38:b9:57:5a:47:10:f8:fc:d3:d6:d9:
2f:61:7a:bc:7a:70:96:bd:2b:d4:0f:4a:14:77:08:7f:ad:1c:
c1:5e:21:74:78:a3:a3:4c:db:5e:b9:18:a0:39:5c:81:c9:38:
e3:07:82:10:da:ef:ff:33:f5:36:17:1c:39:f4:c6:cc:ca:73:
ce:6f:c2:5b:12:03:6b:78:ea:86:ac:2e:a0:78:89:c6:63:52:
78:6f:2b:e3:aa:ec:e5:54:ea:c2:2f:bd:ed:f2:3c:e3:ce:b8:
61:15:d4:dd:dc:21:25:a4:84:0d:a8:d0:8e:3d:8b:3c:a8:16:
b3:93:d6:6c:ef:7d:7d:da:b5:45:4c:69:99:c8:61:51:9f:fd:
c4:51:f2:ac:bd:c8:76:a7:38:2f:c7:10:48:35:5b:d8:c3:4f:
c5:65:65:14:8c:88:09:cb:3c:1f:7d:29:fe:a2:3b:87:65:12:
ff:d3:d4:15
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgICXzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkw
REM1QkUxMTAvBgNVBAUTKDc0MDE2NUE4MEQxMDcxOTcwQUJDMDlDMDJCNzFDMUFD
N0MxRDZFMEUwHhcNMjQxMjExMDYzNjQyWhcNMjYwMzMxMDAwMDAwWjBGMREwDwYD
VQQDEwhBOTE2QkYyQjExMC8GA1UEBRMoRkNDNEE2NTdERDUzMEQ5NTNBMkQ2RjNG
MTU5MzJGRkUwMUYyOTFENjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
APeuUvY27hYItqAEsqR64OegDHyaxwagq1xI2R47Wbh+dbCF+PA4MV4Hyayst03T
xn/eQLz3HZdz5+DNrEXeF4mQKPnLLQn4Iy0D7Nunqk3oAN4+cWvgBA+JUbAnZy0v
m6dmgMYeL/cjfoZW3EKME1QmGqxZ6Ghv/T0swgCisRXGFDaQrtqESTj3d8bFvnsR
f4A9rdX3sSsCW5ZscMyEOkVeh9AczwUkCqHzZy8TSgE8DN3rO/k/OoJjOsdWoNNa
VtvJd1UzHLLyxxXzGXibz9m6AlR/MZZ8M8ncTfxzCy1OQw/62wdBKR/yPr+HKSp4
Q88W8WN3XHaAA4wxFHYT7GsCAwEAAaOCAvMwggLvMB0GA1UdDgQWBBT8xKZX3VMN
lTotbz8Vky/+AfKR1jAfBgNVHSMEGDAWgBR0AWWoDRBxlwq8CcArccGsfB1uDjAO
BgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zBzBgNVHR8EbDBqMGigZqBk
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2
MTFFMjhBQzg4MzdDNzJGRDFGRjIvZEFGbHFBMFFjWmNLdkFuQUszSEJySHdkYmc0
LmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5h
cG5pYy5uZXQvcmVwb3NpdG9yeS85ODA2NTJFMEI3N0UxMUU3QTk2QTM5NTIxQTRG
NEZCNC9kQUZscUEwUWNaY0t2QW5BSzNIQnJId2RiZzQuY2VyMEoGA1UdIAEB/wRA
MD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBuaWMu
bmV0L1JQS0kvQ1BTLnBkZjCCASgGCCsGAQUFBwELBIIBGjCCARYwXwYIKwYBBQUH
MAWGU3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkJGMkIvNDU5RTY2NkVCNzhBMTFFRkI4NzQyNzZFQzRGOUFFMDIvMH4GCCsGAQUF
BzAKhnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MTZCRjJCLzQ1OUU2NjZFQjc4QTExRUZCODc0Mjc2RUM0RjlBRTAyL19NU21WOTFU
RFpVNkxXOF9GWk12X2dIeWtkWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJk
cC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaD6wDANBgkqhkiG9w0BAQsFAAOCAQEAGjRpOyvsauqJCdW9CZl8
IuWMibENV/X0HrZZptFxbunASvaVgaNQrf4yu2n7w2XJgMhPuFwAeEJyoJZux4Cj
TGQuzk0e8001pAkdYM9tTDi5V1pHEPj809bZL2F6vHpwlr0r1A9KFHcIf60cwV4h
dHijo0zbXrkYoDlcgck44weCENrv/zP1NhccOfTGzMpzzm/CWxIDa3jqhqwuoHiJ
xmNSeG8r46rs5VTqwi+97fI84864YRXU3dwhJaSEDajQjj2LPKgWs5PWbO99fdq1
RUxpmchhUZ/9xFHyrL3Idqc4L8cQSDVb2MNPxWVlFIyICcs8H30p/qI7h2US/9PU
FQ==
-----END CERTIFICATE-----
Generated at Wed Feb 5 16:58:50 2025 by rpki-client